Access lists are applied in one direction or the other - in, or out. So you 
are probably looking at an access list that is applied to inbound traffic, 
blocking incoming ftp requests.

A very rudimentary access list entry, that blocks ftp from any source to any 
destination might look like this:

access-list 101 deny tcp any any eq ftp

Keep in mind that this entry on its own blocks everything, not just incoming 
ftp, because all access lists end with an implicit deny any.
You have to explicitly permit something...

Here is an example that blocks ftp, but permits everything else:

access-list 101 deny tcp any any eq ftp
access-list 101 permit ip any any

You then need to apply the access-list to an interface, and specify whether 
it applies to inbound or outbound traffic. Use the "ip access-group" 
command.

Router(config)#interface s0
Router(config-if)ip access-group 101 in

You can get much more detail on this here (watch for URL word wrap):

http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/113ed_cr/np1_r/1rip.htm#1250

I hope this helps...

Dale
[=`)

>From: "SH Wesson" <[EMAIL PROTECTED]>
>Reply-To: "SH Wesson" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: ftp out
>Date: Tue, 05 Sep 2000 19:23:03 GMT
>
>How do I configre an access list such that it only allow users to ftp out,
>but not any ftp in. Thanks.
>_________________________________________________________________________
>Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
>
>Share information about yourself, create your own public profile at
>http://profiles.msn.com.
>
>___________________________________
>UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
>FAQ, list archives, and subscription info: http://www.groupstudy.com
>Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

Share information about yourself, create your own public profile at 
http://profiles.msn.com.

___________________________________
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to